General
- Target 2026-08-04_47ce91307a1eb4aa8af16bfa28ff07fd_elex_glassworm_wannacry
- Size 92KB
- Sample260805-bdcegsvena
- SHA256 bdba864422356f20a445b272db89bf3d81e811349829e4321fdd6cf336b33f77
- MD5 47ce91307a1eb4aa8af16bfa28ff07fd
- SHA1 5406f551f515f9688dec53302014152e1bc0f985
- SHA512 f810f7eb6345ba9bb305224846b502848e5d3fdfbd38c39d9843661b2b6be038601aeedfbf8b3f0c3c1080befa7f40f4ec14c1ff16c043a3ad51c272b3e42b85
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYDO1kzaXKynF0v1:eshQvoLqNwDDhp+e1
- TLSH T15293399FB4D584BCF91466B414AB17B0817B9A84137A67CB3BE1CD79843B22B573C283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_47ce91307a1eb4aa8af16bfa28ff07fd_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_47ce91307a1eb4aa8af16bfa28ff07fd_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103822
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-08-04_47ce91307a1eb4aa8af16bfa28ff07fd_elex_glassworm_wannacry
- Size 92KB
- SHA256 bdba864422356f20a445b272db89bf3d81e811349829e4321fdd6cf336b33f77
- MD5 47ce91307a1eb4aa8af16bfa28ff07fd
- SHA1 5406f551f515f9688dec53302014152e1bc0f985
- SHA512 f810f7eb6345ba9bb305224846b502848e5d3fdfbd38c39d9843661b2b6be038601aeedfbf8b3f0c3c1080befa7f40f4ec14c1ff16c043a3ad51c272b3e42b85
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYDO1kzaXKynF0v1:eshQvoLqNwDDhp+e1
- TLSH T15293399FB4D584BCF91466B414AB17B0817B9A84137A67CB3BE1CD79843B22B573C283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory